Prime LMS 4.2 Port usage

[mbilgrav]

Hi guys,

I am looking at a task of defining the port usage of a Prime LMS 4.2 installation, and I found the URL here:

http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.2/install/guide/prereq.html#wp1075786

The page contains alot of ports, but I focus on the ports that needs to traverse the network – i.e. client to servers ports.

I found these, among others:

TCP	42342	OSAGENT	Common Services	Client to Server	LMS inbound
TCP	42352	ESS HTTP (Alternate port is 44352/tcp)	Common Services	Client to Server	LMS inbound
TCP	44352	ESS HTTP (Alternate port)	Common Services	Client to Server	LMS inbound
TCP	43242	ANIServer	Network Topology, Layer 2 Services and User Tracking	Client to Server	LMS inbound

So, besides they ”forgot” to list the ports for NTP (udp/123) and DNS (tcp&udp/53) on the list (! – a doc-bug ?), I am deeply puzzled around the usage of these ports.

What exactly are the ports used for, and in what conditions ?

Also I need to verify the need for internet connections, as I understand, only tcp/443 & tcp/80 towards *.cisco.com is needed, correct ?

Are there any other references to port usage, that includes everything ?

Anyone knows ??

       Regards

Martin

[ngoldwat]

Hi,

Check out

http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/4.2/install/guide/prereq.html#wp1075786

And I also found that TCP 58357 may also be required between the LMS server and Web Client; however the documentation has not been updated to reflect this yet.

Hope this helps

[mbilgrav]

ngoldwat - thx for your reply.

I think the URL you provided is the exact same as I have written in my post.

My concern arises from that exact list.

So do you know, exactly what the ports are used fore and under which conditions ?

Also the new port you discovered tcp/58357 - was is it used for ?

Think i forgot to tell but  I use the OVA install - dunno if it makes any difference.

[Michel Hegeraat]

The connection to the ANIServer is when you launch the topology view.

The java applet will connect back to the server on that port.

There is a UTLite program that can send "user" details to the usertracking database. Something that should run on your client pc's when they login on your network.

I also found out that LMS will connect out on some "funny" TCP port to switches to get energywise data.

I don't recall what port are used.

So if you lock down all the ports except the ones provided by cisco, expect some suprises.

Cheers,

Michel

[CSCO10675262_2]

Hi Ngoldwat,

I have a customer who is also setting up a LMS behind a firewall and I was wondering if there may be a complete/updated list of the firewall ports for the lms for the different services? Example would be active directory authentication/technology center scans such as energwise indicated by Michel/etc...?

Thanks.